Posts

Overview In the previous post, I proposed a “better” way to handle authentication and authorization in web applications for Enterprise. What I’m going to demonstrate in this post is something rather common in corporate intranets: How to integrate Windows Authentication for intranet web applications using MVC, Windows Identity Foundation 4.5 (WIF) and Claims based auth. WIF 4.5 From MSDN: Windows Identity Foundation 4.5 is a set of .NET Framework classes for implementing claims-based identity in your applications....

Overview For a change, this is going to be mostly a conceptual post. This also sets ground for the subject in the next few security related post. Currently there are several options for user authentication but I feel that app authorization is lagging behind. Most people (devs, analysts and biz) usually just go with the default role-based authorization which is flawed in at least a couple ways. In this post I will expose a better approach....